This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=4170

Lamantyne1, posted Fri May 05, 2017 9:04 pm (22930)

---

In main game directory there are Pack0.pkd and Pack1.pkd. Scripts exist for PKF but not PKD which actually contains music and videos.

Help to extract?

Samples here https://mega.nz/#!G9NTgQzA!ldxO2HmwPnmy ... iIROXZMtho

aluigi, posted Sat May 06, 2017 1:40 pm (22951)

---

Encrypted.
What are the scripts for PKF?

Lamantyne1, posted Sat May 06, 2017 1:57 pm (22953)

---

Encrypted? Oh no...

Here is the script I found for PKF :

Code:

# PKF-File from Sony Singstar PS3
# script for QuickBMS http://aluigi.org/papers.htm#quickbms

idstring "PACKAGE "
endian big
comtype zlib_noerror
get UNKNOWN1 long
get UNKNOWN4 short
get HEADEREND long

do
    get UNKNOWN5 long
    get FILENAME string
    get OFFSET long
    get SIZE long
#    print "Filename %FILENAME% Offset %OFFSET% Length %SIZE%"
    savepos POS
    goto OFFSET
        get ZLIB long
        get UNKNOWN6 long
        get USIZE long
    goto POS
    if ZLIB == 1514948930    # ZLIB compressed
        math OFFSET  = 12
        math SIZE -= 12
        clog FILENAME OFFSET SIZE USIZE
    else                    # uncompressed
        log FILENAME OFFSET SIZE
    endif
while POS < HEADEREND

Lamantyne1, posted Sat May 06, 2017 3:39 pm (22958)

---

I also heard that PKF's header structure was pretty the same as the PKD. Do you want samples of the PKF file ?

aluigi, posted Sat May 06, 2017 6:39 pm (22962)

---

It's encrypted/obfuscated so it's useless.

Lamantyne1, posted Sat May 06, 2017 6:42 pm (22963)

---

Ok... It's a shame... I know there are .pkg.drm files in that file.

Lamantyne1, posted Tue May 09, 2017 4:37 pm (23051)

---

No solutions please? I really want to extract data from this game.

Warthog1336, posted Thu Mar 01, 2018 8:45 pm (32807)

---

BUMP. Here are some comments I found on the Performous program website :

"Concerning the PKD, we found out that the encryption is vulnerable to watermark attack and thus were able to identify that it is actually a .pkf file with substitution cipher applied. The substitution table depends on byte offset but no other factors. This means that the algorithm is sufficiently weak to allow for known plain text attacks but so far we haven't been able to figure out exactly what kind of substitution is used or to extract the key."

AND

"These seem to be encrypted in AES128-CTR mode but we haven't been able to extract the keys. Known plain text attacks have been successful but they don't get us very far because different SingStar releases use different keys."

PLUS

I found out that a program called Performous had a tool (ss_extract) made to extract the SingStar PS3 PKDs. Unfortunately, I can't seem to understand how it actually works.

SO

Is anybody would be able to help us, starting from this good point ?